Flower Delivery Sutton Privacy Policy

Name: LIKE A ROYAL
Brand: Flower Delivery Sutton
Price: 85.00 GBP
Availability: InStock

Introduction

This Privacy Policy sets out how Flower Delivery Sutton (hereafter, "we", "us" or "our") processes and protects the personal data of individuals placing orders from Sutton and surrounding districts. We are committed to safeguarding your privacy and ensuring full compliance with the General Data Protection Regulation (GDPR) and related UK data protection law. Please read the following information carefully to understand our practices regarding your personal data.

Scope of This Policy

This Privacy Policy applies to all personal data gathered from customers placing flower delivery orders with us from Sutton and neighbouring districts. By using our services, you acknowledge the practices outlined herein.

What Data We Collect

We collect only the necessary data required to fulfil our contractual obligations and provide a seamless delivery experience. The personal data we may collect includes:

Contact Details: Full name, delivery address, billing address, and telephone number (for both sender and recipient, where applicable).
Order Information: Purchase details, payment method details (excluding full payment card numbers, which are handled securely by our payment processor), specific instructions, and messages to recipients.
Correspondence: Communications you send to us as part of placing or querying an order.
Technical Data: IP address, browser type, device information, and similar analytics data when you use our website for order placement.

Lawful Basis for Processing

We process your personal data under the following lawful bases, as set out by the GDPR:

Contractual Necessity: Most of the personal data we process is collected so that we can fulfil your order, execute the transaction, and deliver flowers as requested. Without this information, we would not be able to provide our services.
Legal Obligations: We may process certain information to fulfil legal and regulatory requirements, such as record-keeping for tax or accounting purposes.
Legitimate Interests: In some cases, we may process your data to pursue our legitimate business interests, such as improving our service or handling queries, provided these do not override your rights and freedoms.
Consent: Where required, for example, in sending direct marketing communications, we may request your explicit consent. You have the right to withdraw your consent at any time.

How We Use Your Data

Your data is used solely for the following purposes:

To process and deliver your order, including communicating with you about your order status.
To provide customer support and address your queries or requests.
To process payments securely through our trusted payment processor.
To comply with legal and regulatory requirements.
To improve our website, products and services, ensuring better customer experience (using anonymised or aggregated data wherever possible).

Data Sharing and Processors

We do not sell or rent your personal data to third parties. However, for the operation of our business and fulfilment of your orders, we may share your data with trusted third parties, including:

Payment Processors: Professional third-party service providers who securely process payments on our behalf. We never have access to your full payment card information.
Delivery Partners: Select couriers or drivers responsible for delivering your orders to the specified addresses.
IT and Hosting Providers: Vendors who manage our website, IT infrastructure, and ensure secure data storage and back-up.
Professional Advisors: Accountants, legal advisors, and insurers where necessary to comply with legal obligations or exercise our rights.

All processors and service providers engaged by Flower Delivery Sutton comply with GDPR requirements. Data is only shared as necessary for the performance of contracted services and is subject to strict confidentiality and data security obligations.

Data Retention Policy

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. This typically includes:

Order and Transaction Data: Retained for up to 7 years to comply with financial and tax regulations.
Customer Support Correspondence: Retained for up to 3 years after an enquiry is resolved to monitor service quality and manage any follow-up queries.
Marketing Data: Retained for as long as you remain subscribed or until you opt-out of such communications.

Once retention periods expire, your data will be securely deleted or anonymised so that it can no longer be associated with you.

Data Security

We implement appropriate technical and organisational measures to protect your personal data from theft, unauthorised access, alteration, or disclosure. While we strive to protect your information, no data transmission over the Internet or storage method is guaranteed to be 100% secure. However, we continuously review and update our security policies and procedures to safeguard your data.

Your Rights Under GDPR

You have various rights under GDPR regarding your personal data, including:

Right of Access: You can request access to your personal data and obtain a copy of the information we hold about you.
Right to Rectification: You may ask us to correct or update any inaccurate or incomplete data.
Right to Erasure: You can request the deletion of your data where there is no compelling reason for its continued processing.
Right to Restrict Processing: You have the right to restrict or object to how we process your data in certain circumstances.
Right to Data Portability: Where processing is based on consent or contract, and carried out by automated means, you may request to receive the data you provided in a structured, commonly used form.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Children’s Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we learn that data has been collected from anyone under age 16, we will take appropriate steps to delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our operations or legal obligations. Any revisions will take effect once published on our website. We encourage you to review this policy periodically to stay informed about how we protect your data.

Contact and Complaints

If you have questions about this Privacy Policy or your personal data, or if you wish to exercise any of your rights, please contact us using the details provided on our website. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.

Thank you for trusting Flower Delivery Sutton. We value your privacy and are committed to protecting your personal data at every stage of your customer journey.